Security flaw in online UK visa

Updated on May 20, 2007 03:04 AM IST
This flaw means that the details of 50,000 people may have been available online and that is a potential treasure trove for identity thieves and terrorists, reports Vijay Dutt.
HT Image
HT Image
None | ByVijay Dutt, London

An exclusive Channel 4 exposure of an alleged security flaw in Internet visa applications to the British High Commission in India has reportedly caused ripples in the Foreign Office.

This flaw means that the details of 50,000 people may have been available online and that is a potential treasure trove for identity thieves and terrorists. So far there has not been a hint of any radical coming from India but there is the possibility of identity theft by radicals.

The TV channel claimed that the personal details of thousands of people wanting to travel to the UK online was unsecured and available to anyone who simply altered a website address.

After the revelation, the Foreign Office posted a notice on May 17, saying that the VFS Global Ltd provides an on-line application system for UK visa applicants in India, Russia and Nigeria. Due to a technical problem the VFS online application system is currently unavailable. Customers applying for visas in these countries should contact their nearest visa application system for information.

Lord Triesman reacting to the reported breach said, "Security is paramount in our visa system. We will conduct an immediate thorough and independent investigation into this reported breach of one of our commercial partners' systems. The VFS website application service has been shut down.”

It is well known that a large number of people in India apply s for entry to the UK. Not all do it online but last year nearly 50,000 did, including one Sanjib Mitra from Bangalore.

In April last year he had trouble with his application and in trying to sort things out, he discovered that he could access all the other applications that had been made online. Visa processing in India has been outsourced out for some years now by the Foreign Office to a private Indian company, VFS Global.

The TV report said that in a blog last week Sanjib Mitra revealed how he had checked and found the loophole was still there. He said that he emailed the company last year, and heard nothing. Concerned, he alerted specialist computer security journalist Davey Winder who investigated the breach.

Having determined the information was still vulnerable, and succeeded in getting VFS Global to secure the database, Winder contacted Channel 4 News. No one knows if anyone has stolen the personal data that was so freely available.

Close Story

Less time to read?

Try Quickreads

  • Former President of the United States Donald Trump.

    Trump calls for 'immediate' release of Mar-a-Lago search warrant

    Former President Donald Trump called late Thursday for the “immediate” release of the federal warrant the FBI used to search his Florida estate, hours after the Justice Department had asked a court to unseal the warrant, with Attorney General Merrick Garland citing the “substantial public interest in this matter.” The Justice Department request earlier Thursday is striking because such documents traditionally remain sealed during a pending investigation.

  • A file photo of India’s Independence Day celebrations in downtown Toronto, Canada. (Supplied photo)

    India asks Canada to ensure security at Independence Day celebration events

    For the first time ever, the Indian government has called upon Canada to ensure adequate security during Independence Day celebrations at missions in the country but to also prevent the disruption of events organised by the Indo-Canadian community. This was conveyed by India's high commission in Ottawa to Global Affairs Canada, the country's foreign ministry, in a diplomatic communique.

  • Canadian Prime Minister Justin Trudeau speaks with neighbours of east Vancouver residents Gardy and Kate Frost about his handling of vaccine mandates and the Ottawa trucker convoy protests as he meets with residents to discuss investments in housing, in Vancouver, British Columbia, on May 24, 2022. (REUTERS)

    Anti-mandate protests: Doubts cast over Canada PM’s move to impose emergency in February

    Doubts have been cast over the necessity for the government of Prime Minister Justin Trudeau to impose a draconian emergency in the country in February to counter the so-called Freedom Convoy then occupying the capital of Ottawa, as documents filed in a court on Thursday appeared to indicate there was information that a “breakthrough” was possible in negotiations between authorities and the anti-vaccine mandate protesters. The Canadian government has countered these revelations.

  • The US CDC has announced new guidelines. 

    Criticism as US regulator CDC loosens Covid guidelines: ‘Blood on hands…’

    Over the last two years, the United States has seen coronavirus wreaking havoc while the world witnessed the worst of the pandemic in one of the world's most developed nations. Amid the spread of virus and its mutation still a matter of concern, the Centers for Disease Control and Prevention has taken a step forward in loosening the restrictions. Children exposed to Covid don't have to get a negative test.

  • File photo: A Russian military convoy is seen on the road toward the Zaporizhzhia Nuclear Power Station, in Enerhodar, Zaporizhzhia region, southeastern Ukraine.

    Shelling near Ukraine nuclear plant: India calls for mutual restraint

    India has expressed concerns over shelling near the fuel storage of the Zaporizhzhia Nuclear Power Plant in Ukraine, as the Russian offensive continues for over five months. The shelling at the Zaporizhzhia Nuclear Power Plant, which is under Russia's control since March, came ahead of a United Nations Security Council meeting on Thursday to address concerns regarding the facility's safety.

Story Saved
Saved Articles
My Reads
Sign out
New Delhi 0C
Friday, August 12, 2022
Start 15 Days Free Trial Subscribe Now